Dependency Dashboard

[crossplane-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Package lookup failures

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• fix(deps): update k8s.io/utils digest to cf1189d (main)

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update cachix/cachix-action digest to 38b0826 (main)
• chore(deps): update codecov/codecov-action digest to 0b35c9e (main)
• chore(deps): update github/codeql-action digest to b96794f (main)
• chore(deps): update renovatebot/github-action action to v46.3.1 (main)
• fix(deps): update module github.com/crossplane/crossplane/apis/v2 to v2.4.1 (main)
• fix(deps): update module github.com/google/go-containerregistry to v0.22.1 (main)
• fix(deps): update module github.com/sigstore/cosign/v3 to v3.1.3 (main)
• fix(deps): update module github.com/sirupsen/logrus to v1.10.2 (main)
• fix(deps): update module golang.org/x/time to v0.16.0 (main)
• chore(deps): update actions/stale action to v11 (main)
• chore(deps): update negz/create-tag action to v2 (main)
• chore(deps): update curlimages/curl docker tag to v8.22.0 (release-1.20)
• chore(deps): lock file maintenance (release-2.2)
• chore(deps): lock file maintenance (release-2.3)
• chore(deps): lock file maintenance (release-2.4)
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• fix(deps): update module sigs.k8s.io/controller-runtime to v0.25.1 (main)

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package bufbuild/buf-breaking-action).

Files affected: .github/workflows/ci.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module golang.org/x/crypto to v0.56.0 [security] (main)
• fix(deps): update module google.golang.org/grpc to v1.83.1 [security] (main)
• chore(deps): lock file maintenance (main)
• chore(deps): update cachix/install-nix-action digest to 13d8dd5 (main)
• fix(deps): update github.com/google/go-containerregistry/pkg/authn/k8schain digest to 0c8bedb (main)
• fix(deps): update module github.com/sigstore/sigstore to v1.10.10 (main)
• fix(deps): update module google.golang.org/protobuf to v1.36.12 (main)
• fix(deps): update kubernetes monorepo to v0.37.0 (main) (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/client-go, k8s.io/component-base)
• fix(deps): update module github.com/prometheus/client_golang to v1.24.1 (main)
• fix(deps): update module sigs.k8s.io/controller-tools to v0.22.0 (main)
• fix(deps): update module google.golang.org/grpc to v1.83.1 [security] (release-1.20)
• fix(deps): update module google.golang.org/grpc to v1.83.1 [security] (release-2.2)
• chore(deps): update module golang.org/x/crypto to v0.56.0 [security] (release-2.3)
• fix(deps): update module google.golang.org/grpc to v1.83.1 [security] (release-2.3)
• chore(deps): update module golang.org/x/crypto to v0.56.0 [security] (release-2.4)
• fix(deps): update module google.golang.org/grpc to v1.83.1 [security] (release-2.4)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

Branch main

github-actions (6)

.github/workflows/backport.yml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• zeebe-io/backport-action v4.6.0@2e830a1d0b8269505846ddd407a70876913ad1f8
• ubuntu 24.04

.github/workflows/ci.yml (28)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31@630ae543ea3a38a9a4166f03376c02c50f408342 → [Updates: v31]
• cachix/cachix-action v17@5f2d7c5294214f71b873db4b969586b980625e71 → [Updates: v17]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31@630ae543ea3a38a9a4166f03376c02c50f408342 → [Updates: v31]
• cachix/cachix-action v17@5f2d7c5294214f71b873db4b969586b980625e71 → [Updates: v17]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31@630ae543ea3a38a9a4166f03376c02c50f408342 → [Updates: v31]
• cachix/cachix-action v17@5f2d7c5294214f71b873db4b969586b980625e71 → [Updates: v17]
• nicknovitski/nix-develop v1@9be7cfb4b10451d3390a75dc18ad0465bed4932a
• github/codeql-action v4@5595ccaf912efad79be6eef63a5619ff05969be3 → [Updates: v4]
• github/codeql-action v4@5595ccaf912efad79be6eef63a5619ff05969be3 → [Updates: v4]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31@630ae543ea3a38a9a4166f03376c02c50f408342 → [Updates: v31]
• cachix/cachix-action v17@5f2d7c5294214f71b873db4b969586b980625e71 → [Updates: v17]
• codecov/codecov-action v7@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• bufbuild/buf-setup-action v1
• bufbuild/buf-lint-action v1
• bufbuild/buf-breaking-action v1@a074e988ee34efcd4927079e79c611f428354c01
• bufbuild/buf-push-action v1
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/commands.yml (10)

• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• zeebe-io/backport-action v4.6.0@2e830a1d0b8269505846ddd407a70876913ad1f8
• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions-ecosystem/action-remove-labels v1@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/renovate.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• renovatebot/github-action v46.2.2@e09d604f8f803bb527bd8321ed5be06c460b8682 → [Updates: v46.3.1]

.github/workflows/stale.yml (2)

• actions/stale v10@1e223db275d687790206a7acac4d1a11bd6fe629 → [Updates: v11]
• ubuntu 24.04

.github/workflows/tag.yml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• negz/create-tag v1@39bae1e0932567a58c20dea5a1a0d18358503320 → [Updates: v2]
• ubuntu 24.04

gomod (1)

go.mod (31)

• go 1.25.11
• dario.cat/mergo v1.0.2
• github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6@e8a1dd7889d6
• github.com/Masterminds/semver/v3 v3.5.0
• github.com/crossplane/crossplane/apis/v2 v2.3.4 → [Updates: v2.4.1]
• github.com/evanphx/json-patch v5.9.11+incompatible
• github.com/go-logr/logr v1.4.4
• github.com/google/go-cmp v0.7.0
• github.com/google/go-containerregistry v0.21.9 → [Updates: v0.22.1]
• github.com/google/go-containerregistry/pkg/authn/k8schain v0.0.0-20260312205200-e9163014982e@e9163014982e → [Updates: v0.0.0-20260911193048-0c8bedb78437]
• github.com/in-toto/attestation v1.2.0
• github.com/in-toto/in-toto-golang v0.11.0
• github.com/prometheus/client_golang v1.23.2 → [Updates: v1.24.1]
• github.com/sigstore/cosign/v3 v3.0.6 → [Updates: v3.1.3]
• github.com/sigstore/sigstore v1.10.8 → [Updates: v1.10.10]
• github.com/sirupsen/logrus v1.9.4 → [Updates: v1.10.2]
• github.com/spf13/afero v1.15.0
• golang.org/x/time v0.15.0 → [Updates: v0.16.0]
• google.golang.org/grpc v1.82.1 → [Updates: v1.83.1]
• google.golang.org/protobuf v1.36.11 → [Updates: v1.36.12]
• k8s.io/api v0.35.3 → [Updates: v0.37.0]
• k8s.io/apiextensions-apiserver v0.35.0 → [Updates: v0.37.0]
• k8s.io/apimachinery v0.35.3 → [Updates: v0.37.0]
• k8s.io/client-go v0.35.3 → [Updates: v0.37.0]
• k8s.io/component-base v0.35.0 → [Updates: v0.37.0]
• k8s.io/klog/v2 v2.140.0
• k8s.io/utils v0.0.0-20260108192941-914a6e750570@914a6e750570 → [Updates: v0.0.0-20260707023825-cf1189d6abe3]
• sigs.k8s.io/controller-runtime v0.23.1 → [Updates: v0.25.1]
• sigs.k8s.io/controller-tools v0.20.0 → [Updates: v0.22.0]
• sigs.k8s.io/yaml v1.6.0
• golang.org/x/crypto v0.55.0 → [Updates: v0.56.0]

nix (1)

flake.nix (3)

• gomod2nix 1201ddd1279c35497754f016ef33d5e060f3da8d
• nixpkgs nixos-26.05
• nixpkgs-unstable nixpkgs-unstable

renovate-config (1)

.github/renovate.json5

Branch release-1.20

dockerfile (1)

Earthfile (1)

• curlimages/curl 8.20.0 → [Updates: 8.22.0]

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (1)

• google.golang.org/grpc v1.82.1 → [Updates: v1.83.1]

regex (10)

.github/workflows/ci.yml

.github/workflows/ci.yml

.github/workflows/renovate.yml

.github/workflows/renovate.yml

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile

Branch release-2.2

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (1)

• google.golang.org/grpc v1.82.1 → [Updates: v1.83.1]

nix (1)

flake.nix

renovate-config (1)

.github/renovate.json5

Branch release-2.3

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (2)

• google.golang.org/grpc v1.82.1 → [Updates: v1.83.1]
• golang.org/x/crypto v0.55.0 → [Updates: v0.56.0]

nix (1)

flake.nix

renovate-config (1)

.github/renovate.json5

Branch release-2.4

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (2)

• google.golang.org/grpc v1.82.1 → [Updates: v1.83.1]
• golang.org/x/crypto v0.55.0 → [Updates: v0.56.0]

nix (1)

flake.nix

renovate-config (1)

.github/renovate.json5